Symmetric and Asymmetric Encryption CASEJAVA Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A Java application needs to securely exchange a symmetric key with a remote server. The server has a certificate signed by a public CA. The developer is considering two options: (1) use TLS with the server's certificate, or (2) encrypt the symmetric key with the server's public key and send it. Which option provides better security?

   • AEncrypting the symmetric key with the server's public key, because it is simpler and avoids TLS overhead.
   • BNeither is secure because the server's certificate could be forged.
   • CTLS with the server's certificate, because it provides authenticated key exchange, forward secrecy, and integrity.
   • DBoth are equally secure.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In a symmetric encryption system, what must both the sender and receiver possess to communicate securely?

   • AA key exchange server
   • BThe same secret key
   • CA certificate from a trusted certificate authority
   • DEach party's own private key and the other's public key
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A Java application encrypts files for storage. The team must choose between AES-256 and RSA-2048 for encrypting files that average 50 MB. The application runs on a server with limited CPU. Which choice best balances security and performance?

   • AUse RSA-2048 to encrypt each file directly.
   • BUse AES-256 with a hard-coded key.
   • CUse RSA-2048 to encrypt the file and AES-256 to encrypt the RSA key.
   • DUse AES-256 for file encryption and RSA-2048 only to wrap the AES key.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A Java application stores sensitive configuration files on a local disk. The files are accessed only by the application itself, which runs under a dedicated service account. The security policy requires encryption at rest but does not require sharing the data with any external party. Which encryption approach is most appropriate?

   • AUse ECC with a key pair generated for the service account.
   • BUse DES with a hard-coded key in the application source code.
   • CUse AES-256 with a key stored in a hardware security module (HSM) and accessed by the application.
   • DUse RSA-2048 to encrypt the files with the application's public key.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In a typical hybrid encryption scheme, how are symmetric and asymmetric encryption used together?

   • ABoth symmetric and asymmetric encryption are applied to the data in sequence.
   • BSymmetric encryption encrypts the data, and asymmetric encryption encrypts the symmetric key.
   • CAsymmetric encryption encrypts the data, and symmetric encryption encrypts the key.
   • DSymmetric encryption is used only for authentication, and asymmetric encryption is used for confidentiality.
   Reveal Solution Discussion Select an answer first